允许在asp.net核心web项目中使用windows和基本身份验证

services.AddAuthentication(IISDefaults.AuthenticationScheme);

app.UseAuthentication();

services.AddAuthentication("BasicAuthentication")
    .AddScheme<AuthenticationSchemeOptions, BasicAuthenticationHandler>("BasicAuthentication", null);

public class BasicAuthenticationHandler : AuthenticationHandler<AuthenticationSchemeOptions>
{
    protected override async Task<AuthenticateResult> HandleAuthenticateAsync()
    {
        if (!Request.Headers.ContainsKey("Authorization"))
        {
            return AuthenticateResult.Fail("Missing Authorization Header");
        }

        // 解析Authorization Header中的用户名和密码
        // 验证用户名和密码的正确性

        // 如果验证成功，可以创建一个ClaimsIdentity对象，并调用Success方法返回认证结果
        var claims = new List<Claim>
        {
            new Claim(ClaimTypes.Name, username)
        };
        var identity = new ClaimsIdentity(claims, Scheme.Name);
        var principal = new ClaimsPrincipal(identity);
        var ticket = new AuthenticationTicket(principal, Scheme.Name);

        return AuthenticateResult.Success(ticket);
    }
}

app.UseAuthentication();